content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

Cookies set without using the Secure flag or set over HTTP

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

Deprecated X-XSS-Protection header set to "1; mode=block"

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

Diagnostics

Metrics

http

Look for keys/tokens/passwords in HTTP responses, exposed keys/tokens/secrets requires manual verification for impact evaluation.

Credentials Disclosure Check

DNS SaaS Service Detection

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

EventListener contains a cross-site scripting vulnerability via the document object model (DOM). An attacker can execute arbitrary script which can then allow theft of cookie-based authentication credentials and launch of  other attacks.

DOM EventListener - Cross-Site Scripting

Setting the XSS-Protection header is deprecated. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.

XSS-Protection Header - Cross-Site Scripting

A template to detect HTML Forms in page response.


Form Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

Wappalyzer Technology Detection

robots.txt endpoint prober

robots.txt file

A sitemap is a file where you provide information about the pages, videos, and other files on your site, and the relationships between them.


Sitemap Detection

Checks if script tags within the HTML response have Subresource Integrity implemented via the integrity attribute


Missing Subresource Integrity

WAF Detection

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

usprivacy

_ga_D9ZE5LB4KQ

_fbp

keep_alive

_gcl_au

_shopify_sa_t

__kla_id

_shopify_s

_landing_page

_orig_referrer

_ga_HXMZT7KSHG

_shopify_y

_cmp_a

_tracking_consent

_shopify_sa_p

localization

secure_customer_sig

Coque en Bois

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

Shopify

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Sentry

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.

YouTube

GSAP is an animation library that allows you to create animations with JavaScript.

GSAP

Visa

PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.

PayPal

MasterCard facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

Mastercard

American Express, also known as Amex, facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

American Express

Amazon Pay is an online payments processing service that is owned by Amazon. It lets you use the payment methods associated with your Amazon account to make payments for goods and services.

Amazon Pay

Societe des Avis Garantis is a French company that provides customer review and rating services for businesses through its online platform.

Societe des Avis Garantis

Polyfill is a service which accepts a request for a set of browser features and returns only the polyfills that are needed by the requesting browser.

Polyfill

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Tag Manager

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Sirdata is a self-service, third party data-collecting platform that specialises in the collection of behavioural data, predictive targeting and selling of audience segments.

Sirdata

PhotoSwipe is an open-source gallery to support JavaScript-based image zooming.

PhotoSwipe

LazySizes is a JavaScript library used to delay the loading of images (iframes, scripts, etc) until they come into view.

LazySizes

Klaviyo is an email marketing platform for online businesses.

Klaviyo

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

Facebook Pixel

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

boomerang is a JavaScript library that measures the page load time experienced by real users, commonly called RUM (Real User Measurement).

Boomerang

Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.

Priority Hints

Flickity is a JavaScript slider library, built by David DeSandro of Metafizzy fame.

Flickity

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.

web-vitals

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

Webpack is an open-source JavaScript module bundler.

Webpack

Open Graph is a protocol that is used to integrate any web page into the social graph.

Open Graph

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Module Federation

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

Impact	Description	Documentation
-50		Doc Subresource Integrity.
-20		Doc Content Security Policy. L'extension github.com/april/laboratory permet de générer la CSP pour votre application.
-20		OWASP Session Management Cheat Sheet.
-10		Doc header Strict-Transport-Security (HSTS).

https://www.coque-en-bois.fr

Nmap

Mozilla HTTP observatory21 jours

SSL

Grade capped to A. HSTS max-age is too short

Expiration : 13/06/2024

Nuclei21 jours

severity	service	vulnerability
info	http (port:80)
info	http (port:443)
info	http (port:8080)
info	http (port:8443)

Séverité	Name	Matcher
unknown	Credentials Disclosure Check	credentials-disclosure
info	DNS SaaS Service Detection	dns-saas-service-detection
info	CAA Record	caa-fingerprint
info	DOM EventListener - Cross-Site Scripting	addeventlistener-detect
info	XSS-Protection Header - Cross-Site Scripting	xss-deprecated-header
info	Form Detection	form-detection
info	HTTP Missing Security Headers	permissions-policy
info	HTTP Missing Security Headers	referrer-policy
info	HTTP Missing Security Headers	clear-site-data
info	HTTP Missing Security Headers	cross-origin-embedder-policy
info	HTTP Missing Security Headers	cross-origin-opener-policy
info	HTTP Missing Security Headers	cross-origin-resource-policy
info	Wappalyzer Technology Detection	google-tag-manager
info	Wappalyzer Technology Detection	cloudflare
info	robots.txt endpoint prober	robots-txt-endpoint
info	robots.txt file	robots-txt
info	Sitemap Detection	sitemap-detect
info	Missing Subresource Integrity	missing-sri
info	WAF Detection	cloudfront
info	WAF Detection	cloudflare
info	Detect SSL Certificate Issuer	ssl-issuer
info	SSL DNS Names	ssl-dns-names
info	TLS Version - Detect	tls-version
info	TLS Version - Detect	tls-version